[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-24369":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T20:55:33.689Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":24,"downstream":25,"duplicates":32,"related":33,"reserved_at":9,"published_at":37,"modified_at":38,"state":39,"summary":40,"references_raw":48,"kevs":76,"epss":77,"epss_history":80,"metrics":348,"affected":355},"CVE-2025-24369","Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce (such as 42069), and then passes the challenge with difficulty zero. Commit e09d0226a628f04b1d80fd83bee777894a45cd02 fixes this behavior by not using a client-specified difficulty value.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-807","Reliance on Untrusted Inputs in a Security Decision","The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.","weakness","Incomplete","Base","High",[],[],[22,23],"GO-2025-3424","GHSA-56w8-8ppj-2p4f",[],[26,28,30],{"_key":27},"SUSE-SU-2025:0429-1",{"_key":29},"OPENSUSE-SU-2025:14728-1",{"_key":31},"OPENSUSE-SU-2025:15847-1",[],[34,35,36],{"_key":27},{"_key":29},{"_key":31},"2025-01-27T22:57:26.728Z","2025-01-28T15:18:44.746Z","Deferred",{"cisa_kev":41,"cisa_ransomware":41,"cisa_vendor":9,"epss_severity":42,"epss_score":43,"severity":42,"severity_score":44,"severity_version":45,"severity_source":46,"severity_vector":47,"severity_status":39},false,"low",0.00176,2.3,"v4.0","cve.org","CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",[49,57,63,67,71],{"url":50,"sources":51,"tags":54},"https://github.com/Xe/x/security/advisories/GHSA-56w8-8ppj-2p4f",[46,52,53],"nvd","osv_go",[55,56],"X Refsource CONFIRM","WEB",{"url":58,"sources":59,"tags":60},"https://github.com/Xe/x/commit/7bd7b209f4f1b897de85ec8973458dc8be606a8b",[46,52,53],[61,62],"X Refsource MISC","FIX",{"url":64,"sources":65,"tags":66},"https://github.com/Xe/x/commit/e09d0226a628f04b1d80fd83bee777894a45cd02",[46,52,53],[61,62],{"url":68,"sources":69,"tags":70},"https://xeiaso.net/notes/2025/GHSA-56w8-8ppj-2p4f",[46,52,53],[61,56],{"url":72,"sources":73,"tags":74},"https://nvd.nist.gov/vuln/detail/CVE-2025-24369",[53],[75],"Advisory",[],{"date":78,"score":43,"percentile":79},"2026-06-04",0.38789,[81,85,88,91,94,97,100,103,106,109,113,116,118,121,124,128,131,134,137,140,144,147,150,153,156,159,162,165,168,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,230,233,236,239,242,245,248,251,253,256,259,262,265,268,271,274,277,280,283,286,289,292,295,297,300,302,305,308,311,314,317,320,322,325,328,331,334,337,340,343,346],{"date":82,"score":83,"percentile":84},"2025-11-04",0.00146,0.35608,{"date":86,"score":83,"percentile":87},"2025-11-05",0.35595,{"date":89,"score":83,"percentile":90},"2025-11-06",0.3559,{"date":92,"score":83,"percentile":93},"2025-11-07",0.35616,{"date":95,"score":83,"percentile":96},"2025-11-08",0.35607,{"date":98,"score":83,"percentile":99},"2025-11-09",0.35592,{"date":101,"score":83,"percentile":102},"2025-11-10",0.35562,{"date":104,"score":83,"percentile":105},"2025-11-11",0.35589,{"date":107,"score":83,"percentile":108},"2025-11-12",0.3563,{"date":110,"score":111,"percentile":112},"2025-11-13",0.00159,0.37303,{"date":114,"score":111,"percentile":115},"2025-11-14",0.37304,{"date":117,"score":111,"percentile":115},"2025-11-15",{"date":119,"score":111,"percentile":120},"2025-11-16",0.37288,{"date":122,"score":111,"percentile":123},"2025-11-17",0.37269,{"date":125,"score":126,"percentile":127},"2025-11-18",0.00255,0.45514,{"date":129,"score":126,"percentile":130},"2025-11-19",0.45523,{"date":132,"score":126,"percentile":133},"2025-11-20",0.45529,{"date":135,"score":111,"percentile":136},"2025-11-21",0.37275,{"date":138,"score":111,"percentile":139},"2025-11-22",0.37276,{"date":141,"score":142,"percentile":143},"2025-11-23",0.00186,0.40644,{"date":145,"score":142,"percentile":146},"2025-11-24",0.40634,{"date":148,"score":142,"percentile":149},"2025-11-25",0.40647,{"date":151,"score":142,"percentile":152},"2025-11-26",0.40641,{"date":154,"score":142,"percentile":155},"2025-11-27",0.40649,{"date":157,"score":142,"percentile":158},"2025-11-28",0.40623,{"date":160,"score":142,"percentile":161},"2025-11-29",0.406,{"date":163,"score":142,"percentile":164},"2025-11-30",0.40578,{"date":166,"score":142,"percentile":167},"2025-12-01",0.40698,{"date":169,"score":142,"percentile":170},"2025-12-02",0.40706,{"date":172,"score":142,"percentile":173},"2025-12-03",0.40708,{"date":175,"score":142,"percentile":176},"2025-12-04",0.40574,{"date":178,"score":142,"percentile":179},"2025-12-05",0.40603,{"date":181,"score":142,"percentile":182},"2025-12-06",0.40598,{"date":184,"score":142,"percentile":185},"2025-12-07",0.40577,{"date":187,"score":142,"percentile":188},"2025-12-08",0.40588,{"date":190,"score":142,"percentile":191},"2025-12-09",0.40627,{"date":193,"score":142,"percentile":194},"2025-12-10",0.40683,{"date":196,"score":142,"percentile":197},"2025-12-11",0.40711,{"date":199,"score":142,"percentile":200},"2025-12-12",0.40744,{"date":202,"score":142,"percentile":203},"2025-12-13",0.40722,{"date":205,"score":142,"percentile":206},"2025-12-14",0.40682,{"date":208,"score":142,"percentile":209},"2025-12-15",0.40663,{"date":211,"score":142,"percentile":212},"2025-12-16",0.40696,{"date":214,"score":142,"percentile":215},"2025-12-17",0.40735,{"date":217,"score":142,"percentile":218},"2025-12-18",0.40782,{"date":220,"score":142,"percentile":221},"2025-12-19",0.40798,{"date":223,"score":142,"percentile":224},"2025-12-20",0.40776,{"date":226,"score":142,"percentile":227},"2025-12-21",0.40739,{"date":229,"score":142,"percentile":197},"2025-12-22",{"date":231,"score":142,"percentile":232},"2025-12-23",0.40717,{"date":234,"score":142,"percentile":235},"2025-12-24",0.40734,{"date":237,"score":142,"percentile":238},"2025-12-25",0.40786,{"date":240,"score":142,"percentile":241},"2025-12-26",0.40764,{"date":243,"score":142,"percentile":244},"2025-12-27",0.40792,{"date":246,"score":142,"percentile":247},"2025-12-28",0.40684,{"date":249,"score":142,"percentile":250},"2025-12-29",0.40658,{"date":252,"score":142,"percentile":155},"2025-12-30",{"date":254,"score":142,"percentile":255},"2025-12-31",0.40697,{"date":257,"score":142,"percentile":258},"2026-01-01",0.40839,{"date":260,"score":142,"percentile":261},"2026-01-02",0.40817,{"date":263,"score":142,"percentile":264},"2026-01-03",0.40811,{"date":266,"score":142,"percentile":267},"2026-01-04",0.4065,{"date":269,"score":142,"percentile":270},"2026-01-05",0.40626,{"date":272,"score":142,"percentile":273},"2026-01-06",0.4063,{"date":275,"score":142,"percentile":276},"2026-01-07",0.40652,{"date":278,"score":142,"percentile":279},"2026-01-08",0.40681,{"date":281,"score":142,"percentile":282},"2026-01-09",0.40665,{"date":284,"score":142,"percentile":285},"2026-01-10",0.40667,{"date":287,"score":142,"percentile":288},"2026-01-11",0.40639,{"date":290,"score":142,"percentile":291},"2026-01-12",0.40592,{"date":293,"score":142,"percentile":294},"2026-01-13",0.40575,{"date":296,"score":142,"percentile":158},"2026-01-14",{"date":298,"score":142,"percentile":299},"2026-01-15",0.40613,{"date":301,"score":142,"percentile":146},"2026-01-16",{"date":303,"score":142,"percentile":304},"2026-01-17",0.40611,{"date":306,"score":142,"percentile":307},"2026-01-18",0.40569,{"date":309,"score":142,"percentile":310},"2026-01-19",0.40536,{"date":312,"score":142,"percentile":313},"2026-01-20",0.40526,{"date":315,"score":142,"percentile":316},"2026-01-21",0.40523,{"date":318,"score":142,"percentile":319},"2026-01-22",0.40513,{"date":321,"score":142,"percentile":176},"2026-01-23",{"date":323,"score":142,"percentile":324},"2026-01-24",0.40583,{"date":326,"score":142,"percentile":327},"2026-01-25",0.40534,{"date":329,"score":142,"percentile":330},"2026-01-26",0.40492,{"date":332,"score":142,"percentile":333},"2026-01-27",0.40493,{"date":335,"score":142,"percentile":336},"2026-01-28",0.40491,{"date":338,"score":142,"percentile":339},"2026-01-29",0.40473,{"date":341,"score":142,"percentile":342},"2026-01-30",0.40478,{"date":344,"score":142,"percentile":345},"2026-01-31",0.40489,{"date":347,"score":142,"percentile":291},"2026-02-01",[349,352],{"source":46,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":350},{"baseScore":44,"baseSeverity":351,"vectorString":47,"impactScore":9,"exploitabilityScore":9},"LOW",{"source":52,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":353},{"baseScore":44,"baseSeverity":351,"vectorString":354,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[356,367],{"ecosystem":357,"name":358,"vendor":359,"product":360,"cpe_part":9,"purl_type":361,"purl_namespace":359,"purl_name":360,"source":9,"versions":362},"Go","github.com/Xe/x","github.com/Xe","x","golang",[363],{"version":364,"is_range":365,"range_type":366,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"semver",{"ecosystem":9,"name":360,"vendor":368,"product":360,"cpe_part":369,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":370},"xe","a",[371],{"version":372,"is_range":365,"range_type":46,"version_start":9,"version_start_type":9,"version_end":373,"version_end_type":374,"fixed_in":9},"\u003C v1.11.0-37-gd98d70a","v1.11.0-37-gd98d70a","excluding"]